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" r/7e MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to cx)mnnunication(s) filed on 15 June 2004 . 
23)M This action is FINAL. 2b)n Tiiis action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) 13 Claim(s) 1-9.17-29 and 37 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) 13 Claim(s) 1-9,17-29 and 37 is/are reiected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawjng(s) is objected to. See 37 CFR 1.121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5) □ Notice of Informal Patent Application (PTO-152) 

Paper No(s)/Mail Date . 6) □ Other: . 
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DETAILED ACTION 
Response to Amendment 

This office action is in response to amendment filed on 06/15/04. Original application 
contained Claims 1-38. Applicant amended Claims 1, 17, 21, and 37 and cancelled clainns 10-16, 
30-36, and 38. The amendment filed on 06/15/04 have been entered and made of record. 
Therefore, presently pending claims are 1-9, 17-29, and 37. 

Response to Arguments 

Applicant's arguments filed 06/15/04 have been fully considered but they are not 
persuasive because of the new grounds of rejection given below. 

Claim Rejections - 35 USC§103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-38 are rejected under 35 U.S.C. 103(a) as being unpatentable over Broadhurst 
etal (6,205,480 Bl). 

In reference to claims 7, 27, and 37, Broadhurst discloses a system, method, and 
computer program product for processing data for providing access to resources within the data 
processing system (abstract), the method comprising the data processing system implemented 
steps of 
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Receiving a request from a requestor to access a resource in the data processing system 
(Fig. 2 part 100). 

Sending a first cookie to the requestor in response to the request, wherein the cookie is 
used to access the resource (Fig. 2 part 108). 

The system is responsive to receiving a second cookie from a source, comparing an 
identification of the source and the second cookie with the storeid identification and the 
credentials to determine whether the second cookie contains the same infc)rmation as the first 
cookie and whether the second cookie was received from the particular data processing system; 
and responsive to a match between the identification of the source and the second cookie and 
stored identification and the stored cookie, allowing access to the resource (Fig. 2 part 112 and 
1 14 in combination with column 4 lines 42-60). The system allows access depending on the 
authentication information therefore responsive to a match between the identification of the 
source and the second cookie and the stored identification and the stored credentials. 

Although Broadhurst does not expressly disclose storing the cookie, Broadhurst discloses 
storing the credentials that can be formed into a cookie (column 3 Unes 41-48). The user's 
identity is used to form a network credential (column 4 lines 20-25). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the credentials to create the cookie. One of ordinary skill in the art would 
have been motivated to do this because this is used in the authentication scheme which allows a 
user to access numerous protected resources with a single authentication procedure (column 2 
lines 42-48). 
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In reference to claim 17^ the claim is rejected as in the rejection for claim 1, in addition 
the system includes a database of credentials (column 3 lines 61-65) which performs that 
function of the cache. 

In reference to claims 2 and 22 wherein access to the resource is allowed by accepting 
the second cookie (Fig. 2 part 1 14 column 3 lines 10-15), 

In reference to claims 3 and 23, wherein the system comprises: rejecting means, 
responsive to an absence of a match between the identification of the source and the second 
cookie and the stored identification and the stored cookie, for rejecting the second cookie 
(column 4 lines 59-60). Access is granted depending on the authentication information obtained, 
as a result if the person is not authentic then access is not permitted. 

In reference to claims 4, P, 19, 24, and 29, wherein the resource is a file and the first 
cookie identifies disk location of the file. Broadhurst discloses the resource being an application. 
An application is a program designed to assist in the performance of a specific task, and a 
program is a file therefore the browser in the system of Broadhurst is requesting access to a file. 

In reference to claims 5, 14, 25, and 34, wherein the source is a web server (Fig. 1 part 

12). 

In reference to claims 6 and 26, wherein the storing means for storing an identification of 
the source and the first cookie to form a stored identification and a stored cookie comprises: 
storing means for storing the identification of the source and the first cookie in a cache (column 
3 lines 42-45). The credentials are stored in a database that performs that function of the cache. 

In reference to claims 7 and 27, a system wherein the identification of the source is 
Internet protocol addresses (column 3 lines 1-15). 
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In reference to claim 20, wherein the identification of the requestor and the identification 
of the source are Internet protocol addresses. 

Although Broadhurst does not expressly disclose the identification of the source and the 
requestor as being Internet protocol addresses, Broadhurst does disclose that the network is a part 
of the Internet. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use IP address as identification for the source and requestor. One of ordinary 
skill in the art would have been motivated to do this because IP addresses are the means of 
identifying devices on the internet. 

In reference to claims 8 and 28, wherein the receiving means, sending means, storing 
means, comparing means, and allowing means are performed in a browser (Fig. 1 part 14). 

Claim 18 is rejected under 35 U.S.C. 103(a) as being unpatentable over Broadhurst as 
applied to claim 17 above, and further in view of Grantges (6,324,648 Bl). 

Broadhurst does not expressly disclose the requestor is a server. 

Grantges discloses a system that use authentication cookies wherein the cookies are 
redirected by a server to the correct server therefore making the server the requestor on behalf of 
the web browser (column 1 1 line 63 to column 12 line 10). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to send the request from the server to the web server as in Grantges in the system 
of Broadhurst. One of ordinary skill in the art would have been motivated to do this because the 
proxy server provides a buffer security to the internal network. 
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Conclusion 

TfflS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS fi*om the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 , 136(a) will be calculated fi*om the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W Klimach whose telephone number is (703) 305-8421. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (703) 305-4393. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for pubUshed applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

The 2100 Tech center will move to Carlyle in October 2004. The new telephone number 
for the receptionist is (571) 272-2100. The examiner's new telephone number will be (571) 272- 
3854. 

PWK 

Friday, October 15, 2004 




